Privacy Policy

Effective date: August 1, 2026

Last revised: September 30, 2026

This English text is a reference translation. The Japanese version is the authoritative text, and it prevails in the event of any discrepancy.

Kpin Studio (the "Operator") sets out this Privacy Policy (this "Policy") regarding the handling of user information in the smartphone application "Shoku Labo" (the "App").

1. Information we collect

The App collects the following information.

(1) Account information

• The identifier of an anonymous account (an ID the App issues automatically; it contains no name or similar details)
• If you sign in with a Google account: your email address and display name

(2) Meal records

• The meals you log (dish name, ingredients, amounts, how each item was cooked, the time of day, and the date and time of the record)
• Figures calculated from those records, such as the antioxidant score

(3) Photos

• Images you take or select so that meals and recipes can be recognized. Images are sent only for AI recognition and are not stored on the Operator's servers.

(4) Purchase information (paid plan)

• The status and history of subscriptions made through Google Play (payment details such as credit card numbers are handled by Google and are not collected by the Operator)

(5) Information used to prevent abuse

• Device integrity information used to prevent tampering with the App and unauthorized access (Firebase App Check / Play Integrity)

2. Purposes of use

We use the information we collect for the following purposes.

1. Providing and operating the App (storing meal records, calculating and displaying the antioxidant score)
2. Generating AI text for the paid plan (a comment accompanying a related study, and weekly and monthly recaps, generated from totals of your meal records)
3. Managing the status of paid subscriptions
4. Preventing abuse and keeping the system secure
5. Improving quality and addressing defects
6. Responding to inquiries

3. Transfer to and processing by external services

The App uses the following external services to provide its features, and all or part of the information above is sent to them.

• Google Firebase (Authentication / Cloud Firestore / App Check): account information, meal records, device integrity information — for storage, authentication, and abuse prevention
• Google Gemini API: photos and totals of meal records — for AI recognition of meals and for generating comments and recaps
• Google Play: purchase information — for processing and managing subscriptions
• RevenueCat (RevenueCat, Inc.): purchase history and status, and an anonymous identifier for the user — for verifying purchases and managing subscription status

• Handling of information by each service other than RevenueCat follows Google's Privacy Policy (https://policies.google.com/privacy).
• Handling of information by RevenueCat follows RevenueCat's Privacy Policy (https://www.revenuecat.com/privacy). No information that directly identifies an individual, such as a name or email address, is sent to RevenueCat.
• Data sent for AI recognition and text generation is not used to train generative AI models, under the terms of the APIs the Operator uses. Google may log this data for a limited period to detect and prevent abuse.

4. Provision to third parties

The Operator does not provide user information to third parties except in the following cases.

1. Where the user has consented
2. Where required by law
3. Where necessary to protect a person's life, body, or property and it is difficult to obtain the user's consent

5. Health-related information

The meal records and antioxidant score handled by the App are an indicator specific to this App, expressing how rich a meal is in certain components. They are not information intended for medical care, diagnosis, or treatment. The App does not collect special-care personal information such as diagnoses or test results.

6. Retention and deletion

• Meal records are retained for as long as the account exists.
• You can delete your account information and meal records at any time from "Delete account" in the App's menu (deletion on request through our contact address is also available).
• When you delete your account, your account information and meal records are deleted immediately, and after about one hour they can no longer be restored, even by the Operator (the Operator does not keep backups of this data). Final erasure from Google's servers follows Google's data deletion policies.

7. Security measures

The Operator takes reasonable security measures — including encryption of communications, access controls, and detection of tampering with the App — to prevent unauthorized access to, loss of, alteration of, or leakage of the information collected.

8. Use by minors

Minors should use the App with the consent of a parent or guardian.

9. Changes to this Policy

The Operator may change this Policy as necessary. If we make a significant change, we will give notice by appropriate means, such as a notice within the App.

10. Contact

For inquiries about this Policy or the handling of user information, please contact us at:

• Operator: Kpin Studio
• Address: Wind Ebisu Building 8F, 2-4-8 Ebisu-nishi, Shibuya-ku, Tokyo 150-0021, Japan
• Email: karupintv.goods@gmail.com